28472 matches found
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
...
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-1818 Use after free in Vulkan
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-1810 Heap buffer overflow in Visuals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Chromium: CVE-2023-1230 Inappropriate implementation in WebApp Installs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft OneNote Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-2858 Use after free in Sign-In Flow
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-2008 Out of bounds memory access in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
...
Skype for Business and Lync Spoofing Vulnerability
...
Chromium: CVE-2022-1128 Inappropriate implementation in Web Share API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Spoofing Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows User Account Profile Picture Denial of Service Vulnerability
...
Chromium: CVE-2021-38002 Use after free in Web Transport
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Windows AF_UNIX Socket Provider Denial of Service Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
...
Windows Kernel Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30556 Use after free in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Desktop Bridge Denial of Service Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows SMB Client Security Feature Bypass Vulnerability
...
Chromium: CVE-2021-21229 Incorrect security UI in downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Application Compatibility Cache Denial of Service Vulnerability
...
Azure DevOps Server Spoofing Vulnerability
...
Windows Overlay Filter Information Disclosure Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows Camera Codec Pack Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Windows NAT Denial of Service Vulnerability
A denial of service vulnerability exists when Windows Network Address Translation NAT on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the...
Microsoft Graphics Components Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...
Microsoft SharePoint Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...
Windows Task Scheduler Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Windows Certificate Dialog Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...
Microsoft Windows Setup Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as a Domain Administrator. Exploitation of this vulnerability requires Exchange Web Services EWS and Push Notifications to be enabled a...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. To exploit the vulnerability, an attacker would need to execute a man-in-the-middle attack to...